Evan Hunt
20502f35dd
[master] allow CDS/CDNSKEY records to be signed with only KSK
...
4721. [func] 'dnssec-signzone -x' and 'dnssec-dnskey-kskonly'
options now apply to CDNSKEY and DS records as well
as DNSKEY. Thanks to Tony Finch. [RT #45689 ]
2017-09-12 23:09:48 -07:00
Mark Andrews
615b961e02
4682. [bug] Don't report errors on records below a DNAME.
...
[RT #44880 ]
2017-08-17 15:49:59 +10:00
Evan Hunt
cdacec1dcb
[master] silence gcc 7 warnings
...
4673. [port] Silence GCC 7 warnings. [RT #45592 ]
2017-08-09 00:17:44 -07:00
Evan Hunt
036305f00d
[master] race condition when reloading while resigning
...
4661. [bug] A race condition could occur if a zone was reloaded
while resigning, triggering a crash in
rbtdb.c:closeversion(). [RT #45276 ]
2017-07-28 00:02:17 -07:00
Mark Andrews
4bf32aa587
4654. [cleanup] Don't use C++ keywords delete, new and namespace.
...
[RT #45538 ]
2017-07-21 11:52:24 +10:00
Evan Hunt
0d90835d2a
[master] enhanced rfc 5011 logging
...
4642. [cleanup] Add more logging of RFC 5011 events affecting the
status of managed keys: newly observed keys,
deletion of revoked keys, etc. [RT #45354 ]
2017-06-27 10:49:43 -07:00
Evan Hunt
d39ab7440e
[master] automatically tune max-journal-size
...
4613. [func] By default, the maximum size of a zone journal file
is now twice the size of the zone's contents (there
is little benefit to a journal larger than this).
This can be overridden by setting "max-journal-size"
to "unlimited" or to an explicit value up to 2G.
Thanks to Tony Finch. [RT #38324 ]
2017-05-02 13:23:08 -07:00
Mukund Sivaraman
03be5a6b4e
Improve performance for delegation heavy answers and also general query performance ( #44029 )
2017-04-22 09:22:44 +05:30
Mark Andrews
600b027731
4587. [bug] named-checkzone failed to handle occulted data below
...
DNAMEs correctly. [RT #44877 ]
2017-04-20 13:28:48 +10:00
Witold Krecicki
fa9b4de716
4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449 ]
2017-02-20 11:57:28 +01:00
Mark Andrews
2f5444972a
perform more testing on rndc <op> -redirect
2017-02-02 17:25:54 +11:00
Mark Andrews
dfe3068ef3
4563. [bug] Modified zones would occasionally fail to reload.
...
[RT #39424 ]
2017-02-02 17:11:15 +11:00
Tinderbox User
a9e8198788
update copyright notice / whitespace
2017-01-12 23:45:41 +00:00
Mark Andrews
d2e1b47d4f
4553. [bug] Named could deadlock there were multiple changes to
...
NSEC/NSEC3 parameters for a zone being processed at
the same time. [RT #42770 ]
2017-01-12 14:25:45 +11:00
Mark Andrews
52e2aab392
4546. [func] Extend the use of const declarations. [RT #43379 ]
2016-12-30 15:45:08 +11:00
Tinderbox User
e37bc34b31
update copyright notice / whitespace
2016-11-02 23:46:39 +00:00
Mark Andrews
5f8412a4cb
4504. [security] Allow the maximum number of records in a zone to
...
be specified. This provides a control for issues
raised in CVE-2016-6170. [RT #42143 ]
2016-11-02 17:31:27 +11:00
Mark Andrews
8eceb0bffe
4461. [bug] win32: not all external data was properly marked
...
as external data for windows dll. [RT #43161 ]
2016-09-07 14:12:11 +10:00
Mark Andrews
c7e021e2e6
4439. [bug] Address race conditions getting ownernames of nodes.
...
[RT #43005 ]
2016-08-12 14:08:48 +10:00
Mark Andrews
5734cd3943
4438. [func] Use LIFO rather than FIFO when processing startup
...
notify and refresh queries. [RT #42825 ]
2016-08-12 11:33:48 +10:00
Evan Hunt
d06aed77ff
[master] remove spurious newline in EDNS EXPIRE logging
...
Patch submitted by Tony Finch (dot@dotat.at ).
2016-08-10 09:25:48 -07:00
Tinderbox User
3e6b0b4931
update copyright notice / whitespace
2016-07-22 23:46:17 +00:00
Mark Andrews
f20179857a
4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
...
to provide feedback to the trust-anchor administrators
about how key rollovers are progressing as per
draft-ietf-dnsop-edns-key-tag-02. This can be
disabled using 'trust-anchor-telemetry no;'.
[RT #40583 ]
2016-07-22 20:02:17 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Witold Krecicki
4681ab1fc2
4387. [test] Rewritten test suite for catalog zones. [RT #42676 ]
...
4386. [func] Support for master entries with TSIG keys in catalog
zones. [RT #42577 ]
2016-06-22 10:50:09 +02:00
Witold Krecicki
7a00d69909
4376. [experimental] Added support for Catalog Zones, a new method for
...
provisioning secondary servers in which a list of
zones to be served is stored in a DNS zone and can
be propagated to slaves via AXFR/IXFR. [RT #41581 ]
4375. [func] Add support for automatic reallocation of isc_buffer
to isc_buffer_put* functions. [RT #42394 ]
2016-05-26 21:23:19 +02:00
Mark Andrews
049a49c295
4367. [bug] Remove unnecessary assignment of loadtime in
...
zone_touched. [RT #42440 ]
2016-05-18 12:39:50 +10:00
Evan Hunt
132a571179
[master] fix mkeys TTL 0 issue
...
4337. [bug] The previous change exposed a latent flaw in
key refresh queries for managed-keys when
a cached DNSKEY had TTL 0. [RT #41986 ]
2016-03-22 12:12:32 -07:00
Tinderbox User
27def92931
update copyright notice / whitespace
2016-03-21 23:45:22 +00:00
Mark Andrews
0993cd5f22
4336. [bug] Don't emit records with zero ttl unless the records
...
were learnt with a zero ttl. [RT #41687 ]
2016-03-21 13:22:21 +11:00
Mark Andrews
b8dcc13bc5
4335. [bug] zone->view could be detached too early. [RT #41942 ]
2016-03-21 12:02:00 +11:00
Evan Hunt
4071efbec0
[master] disallow map zones in response-policy
...
4269. [bug] Zones using "map" format master files currently
don't work as policy zones. This limitation has
now been documented; attempting to use such zones
in "response-policy" statements is now a
configuration error. [RT #38321 ]
2015-12-02 21:10:09 -08:00
Mark Andrews
5b1c7ef35b
4264. [bug] Check const of strchr/strrchr assignments match
...
argument's const status. [RT #41150 ]
2015-11-20 18:38:24 +11:00
Mark Andrews
29868ebbe3
4254. [bug] Address missing lock when getting zone's serial.
...
[RT #41072 ]
2015-11-05 17:43:30 +11:00
Mark Andrews
e939674d53
4252. [func] Add support for automating the generation CDS and
...
CDNSKEY rrsets to named and dnssec-signzone.
[RT #40424 ]
2015-11-05 12:09:48 +11:00
Evan Hunt
40c619daee
[master] fix theoretical shutdown race
...
4226. [bug] Address a theoretical shutdown race in
zone.c:notify_send_queue(). [RT #38958 ]
2015-09-29 15:27:12 -07:00
Mark Andrews
70862302f8
4181. [bug] Queued notify messages could be dequeued from the
...
wrong rate limiter queue. [RT #40350 ]
2015-08-17 10:37:06 +10:00
Mark Andrews
3a49d0ff10
4164. [bug] Don't rename slave files and journals on out of memory.
...
[RT #40033 ]
4163. [bug] Address compiler warnings. [RT #40024 ]
2015-07-13 09:46:59 +10:00
Mukund Sivaraman
08f0129732
Fix a bug printing zone names with '/' character in XML and JSON stats ( #39873 )
2015-06-29 18:33:18 +05:30
Evan Hunt
8c9fba44a4
[master] further RPZ fixes
...
4131. [bug] Addressed further problems with reloading RPZ
zones. [RT #39649 ]
2015-06-03 18:18:55 -07:00
Mark Andrews
e53e202ef3
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537 ]
2015-05-28 13:17:07 +10:00
Tinderbox User
3813d22587
update copyright notice / whitespace
2015-05-27 23:45:25 +00:00
Mark Andrews
598b502695
4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
...
key as per RFC 7344, Section 4.1. [RT #37215 ]
2015-05-27 15:25:45 +10:00
Evan Hunt
a32b6291aa
[master] address regression
...
4126. [bug] Addressed a regression introduced in change #4121 .
[RT #39611 ]
2015-05-26 19:11:08 -07:00
Mark Andrews
f1a261ba2d
4104. [bug] Address uninitialized elements. [RT #39252 ]
2015-04-17 14:04:47 +10:00
Francis Dupont
bcb68be0a8
misc fixes for VS 2015 CTP #39267
2015-04-17 02:57:02 +02:00
Mark Andrews
54fe1d05b6
4095. [bug] zone->options2 was not being properly initalized.
...
[RT #39228 ]
2015-04-11 08:04:02 +10:00
Mukund Sivaraman
9a7532f836
Send notifies immediately for slave zones during startup ( #38843 )
2015-03-25 10:55:55 +05:30
Mukund Sivaraman
ebeb4b3e09
Fix a crash due to use-after-free ( #38495 )
2015-03-18 06:42:54 +05:30
Mark Andrews
1b05d22789
4082. [bug] Incrementally sign large inline zone deltas.
...
[RT #37927 ]
2015-03-05 09:59:29 +11:00